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*RT-C, #«JB#K**i-*ix«ffl#* (ID) 
mDit^it^aMSt^XV^^K^^- * E 

±tmw#* s ii#x?i£Lfcaisc^ »*©H*-c»a 

«»T-e. #fmB#fc*ft**i«»** ( i D) 
X<b*u M7-^rt^M$*v5i:ll^t-, *aSI 

y h v - >, ic «fc o <m s n-c«ffl#»-»* mew $ *u 

©I D£$&tiWri£ftX^5^£l-^X, 

g^^Bd (ID) h!7-*e*Lfc«* h 

<7-? fcfiJffl#Mt?#< tt>3 Eiroafi&fTft 5 w fc K: 

!7-*0>RliE**T £-£3 - 1 
BSE/i*-£«iEj£#5S» 
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Ogffl (ID) Sr+y h!7-*fc»Lfc«. 

9, BB«£Tfc.fctM^affirofc*©ifc^gl»Kli* 
[0 00 1] 

o > ftim^-^'M^Siam-v*^ 

[0 0 0 2] 

«#«^fcHSS[«l-«*»ll''C» (a) AH*** 18 * 1 
i:, (b)jtRCiS«* s tTftt>*tXV^ia«iU:»aflSrtS 
WWBKatSK^V^-Ctt, CCITTXItS* 

7-^Sr*i]fflL7tv^#{ci4, *f IDi fe^yM?- 

•to ht7-*tta#X{*#LXV^*iJffl# i 

roS!.^1fa$r® , 5ttlLXl^i:< cnSrSS^Si: tX r u 

M Sr*»X, *Jffl#i^i' h^-^B-CW-SBwafll©^ 

v^xam^c^Bt^L.. ^#r B ix-a(t 5rBB^-r5„ 

[0 0 0 3] 

je l v > t v > 9 wrcf ^ ^ ■*> $ nr v * 
50 a. L*>L4*b^-y+^a«Ki3v^tt, *<^s 
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aaaa*acx*i«#fcr*-fe*l-awi:##*.e>*t 
h°!7 -* #*ta na-sas ft*** 6 #<D®mm# 

3 0 £iu*v*fc»6a*¥**»"e*>9. st^->^rA 
tc»1-5#*a*©ftA>Tft fco t fcSStfJft t>»Xfc 

am and A. Shamir:"Differential cryptoanalysis of D 
ES-1 ike cryptosystems-,'90 EUROCRYPTO, August 199 
0.) fcJ:9»aS*VC^6. iSfc^tt-tkWfrftbf 

ass*.**:*, aaar****©**©*- ***a 
ro^scr-ii, **flsa«*ftft 5 tcMc&m*®&m<» 

ft5^-S* 5 fe°fc» ^° 
[0 0 0 4] *HW©gWtl. ±JtUfctt*ft«»IB« 

9 « 9 ©ft^X-fcC ft 5 C 4 *"C* 5ffi#BiiE/lfc^« 
[0 0 0 5] 

^ y M7-^J3j;TJ!*«)^Jffl#»-*'ift*ji»^*' 

it**t**i*iH#* (id) #*sxmi, ^j-^- 
^rtcaaaftstwafc, *a««*«>«fc lxe^ 

f,jx5 I D CWM Lfc8WflM»a s * yH7-^CJ:9ff 
{Stf jSixXV^it-g-f-fc^X, &liE#a»f>liE | B#fcS£* 

,v=f y ^Au^aa*******^***"*"*** 1 * 

B/NHHBEa*****. 
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a a xiz ro^Biffl#«-*aft#a»t**** 5 

«a#5-*.6*v0^ttRTX, «llfKtWM"l 

fflt^s (id) #«sxfe*u *j/M7-*rtfc^a* 
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lkw*^** a** e i-*** 

Xfc5. 

[0007] 3 ©wait, mis*?*-?-* 

Jo i TJ«-5: <7>£ftJ *a ft *»«l"f^#5S;& 5 

(ID) *«axfe*b, *yH7-^rtC^BS 
Ji6fcB*fc, *iiSI»t^»^i:LXfflv>f 3 ix5IDlc 

i Dt 

kfcio. «a##*-fa»«)45«t (id) t*yh7 

-*fc*Lfc«, ht7-*kfl|ffl#iSX£< it> 3 
H«a«tffft5wfcKJ:9, *»M7-* 
#©BiiE, «a#CJ:**s' h!7-*»»K**TiS* 

[0008] *%w©m4oi#mi±. a«*y n?-*' 
*3j;^©^Jffl#i-*iift*iiSi^^*'^*^" r5 
§igii3j$^*.e>*ixv^*RTx, #«ffl#ic*^-en*J 

(ID) MM* X 6*u *jrb?-#ftt*l« 

*v«kw»c, *a««*«>ai:Lxfflv^*vaiDC 

^rtCctt6^Jffl#©IDkS5«fll«* s *«*^^ 
S^tcio^X, BBEOfc*l-^ J' H7-^^6flffl* 

^abttsr-^t, t(o*©»«a««rf?ft5fc*© 
«a#a»*-fi»©*« (id) tr+^n^-^K 

<f*ffft5^kCJ;9. BIE©*TJ3J:Vflf*a«©fc 

SCXfoSo 
[0 0 0 9] 

[man vTx.mi*.va2*m**x*im*>*i 

IDi t*yl"!'^K*t' fcfc+yhP-^ttWB 

(gcfflv*6*a«r c *aft»4«2*»6B4-f*. a 

v>X*y hy-^tt, *Jffl#i©*SiII Di CS^5# I 
Di-EsiO DXM^EsiO SrHiUfit^ 
§§3^ibfl]ffl#i©8S^ s i C*oXa*flS*#lfcW 
iEsi (r e ) tftfcU r u kEsi (r c ) Sri 

Si (t c ) a^aWWHRE- 1 s i ( ) Srfflv>x, 
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»4*5i»6>»4-*-*. i l±** h!7-^*JBv»fc 
«5fcWClt*E si () trllf8 6T?«tU c*b*ffl 

Si (r,)t«US6t««'cWotEi 
i (r u ) *«F*B7-C*HWbLtE r c (E s i (r 
„))fcff*U r„ iEr c (Esi (ru))*:**!" 

HEr c (Est (t,))«HU 

EsiO.Erc ( )«rfflv^S-feCJ:"J. 
^P>aietl-C#fcE r c (Esi (r u ))5r«-§"SS8, 
9-ett*br u ^yH7-^«^r u tit 

«$1 0T-tt:$S? LTp5p#a s -§H-*Ll4* i *riEi*#lfli* 
fcfCBBE-r*. tbtC©** s **o-CV^tf, «ffl 

SfcB»bftfcfUffl#i«-»U-C«f** 1 l-CEsi 
(r n ) *#*U itiSOSto il±a*»*»5fc 
Pt-9-81 2 «rffl^tB LO^S r n fc^D'Si 

HEsi (r n ) trtWU lOf^^?-** 1 

<b&o t « fctt fc tt^?S§ i 3 -ejttt t -c-smtf* y 

»**«*H«E8i O £fflv^c£K<fc9E si 
(r n ) *tt*Lr„ CtU^jffl^lg^Lfct 
ofc-»i-*btf*y H7-^*rlEai LTBSE-f^ fc 

■£*-Ctr4iaroiHI© J $ , 9 i 9 Srfrfc 5 d> * 

yts^-^lctSHJffl^BBE, (2) *lffl*lcfc5*s' 
V7-?0>W&* (3) *y H7-^*»6«ffl*^»*a 

ftoEWwaoiBi-f^-c^tsiai-awtAs-e* 

So 

[0 0 10] Se,Kiii«@*«:^<e< U ft****!* 40 
^ y h r;_^^oi D©S*&£»ttr3ll©iI{§© 
^9 k 9 Srff45<0*T<l) M7-*i;:J:**lffl* 
©BE. (2) H*-*®**' (3) * 

T«*fc*a+* i k Sr?TBii-a* 2 

[0 0 1 1 ] 

HTfclH3RtfB4*rfll^r*§M!©iiS2 
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MIDI ta»*^*2 0-C«tSilfcBKffl®a'«r 

JHV*«*Mr 4 «r3SL»B4S2 2CJ:9B*i-6. * 
„ yv ~ 9 tt , BBEfilf**aSil»B2 3l£<fc5M#F 
( ) *J:t5«ffl#i«)»««Si lcJ;5*iia9t^B§^ 
Esi () &ffl^-C»t-5H&2 4T?E s i (F (r c . r 
n ))fctHIU tuiEsi (F ( r c . r„ ))«ri I- 
mz>. *fc«JB#itt, *Uffl#i©85£8iSi 
^^SI^tS^BSSScT-fcSE^si ( ^ iBSEffi 
^MaiMM^§l2 6X*<OBISF( ) &B8&F ) tffl 
t^-C, E -1 si (Esi (F ( r c . r„))) SrtrH 
U (t c , r„)^ to tr**flfli«««>*a« 

u fcatt#5.nfct u #jfc*»2 7x-oit^m* J - 

Srt-fitf*?' M7-^S:iEl tUtBliEi-5. tUfc- 
fc?iJffi#©jE?S 4 s i Sr»orv^4v^i*»6f«ffl#« 

5„ Sot, E _1 si () &*Pfe4iM&AK»4. Esi 

(r c . r n ) i±**^w©a«cu*»a*.<ev^ 

[0 0 12] «V*T«ffl# i «> ?Uffl#»SS?g@Si K 
J:o"Cr u SrBt^S§2 9tCj;«9Bt^fcLTE s 
i (r„> trffcftU Esi (r,)WfH?-^ 
S9S^„ rhtSttt+yhP^tta^^ 
V>5> r u t i©«S*fl!«Si A»b«*»2 8-CE si 
(r u ) Srfh^L, rrofii: i Srtk 
®e§| 3 0-ett« Lfc^m-ifc-r^tt* i SriEa4*lffl*t 
LXBIlEf-So fcS^tt, i^'b^^n-C^fcEsi 
(r u ) SfUffl* i 0»*«iSi lc«t5a#i?icX*fo 
5E _1 Si ( ) ^rfflV^-C, E _1 si (Esi (r u »* 

imtL, mbiitzmmm i^m-o^ok-^-rMt 

i tr3ES4HMl*fcMM"*. f»UtiO*«**4-»"C 
v^tf, «ffl#tt3Ea4Si tr»oXV^ii:*»b, 

1-ti(4, *y M7-^"-»I D<om^Sr^*Xtf3@© 

5fiJffl#©BiiE, (2) «ffl*CJ:4*y 
K. (3) *y H7-^^6fUffl#^»*a^ ro K^' 7:)3 

[o o i 3] 4*3, *«reil)vvfcBHkF< ) 14^© rg| 
TM^F( ) w^feftJ 

*#i x, y*J*jEbfci*, z = f (*• y) * m 

1ft z JM^t. 
ft#2 ii«8LtiS. z = F (x, y) 
x, yl4-Sl-ft^^H?)Ci:„ 

3 foSx^4x.bix, 7V^4r 
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fcUfc*. En CF(r. x))©ffl*fi*2ilifc§lil 
[0 0 14] 

W2]*«l«t7a-ft-Ft$> 26 ^ 



Do 

[05] 'f£*0i]O»^**-t7 B -^~ hr * fo5 ° 
[«F*«>ttW] 

1 iDi -Esi o y**- 

2 a*»*» 

3 «HH* 

4 «^3S 

5 asanas 



9 

i o jttstfs 

i i at#H 

1 2 «f #S 

1 3 it&S§ 

21 IDi -Esi () 

22 a*»4* 

23 1 





[0 5] 




(6) 



[11] 



iDi-EsiO 



2 



IDi 



EsK) 3 



-i 



E Si (r c ) 



r u 



ErcO EsiO 



I 1 



— tr 



"T" 

8 



fn 



EsiO 



Esi(rn) 



I I 



IDi 



-I 4 

EsiO ( 



7 



EsiO 

1 — <r 
6 



-5 



rn E S ,0 12 



"j^i(rn 



13 



31900127 3lfflt»l • £*D0J 



(7) 



5-344117 



[03] 



*<!» h7-? 



IDi EsiO « 



22 



SLR 
*4S 



r u 



-21 



r 0 



m5 3 



_Eg() F(r Cl r n ) 

B&W| 



T 
24 



EsiO 
Esi M j^^T 



28 



IDi 



r n 



E^(F(rc,rn)) 



Esi(r u ) 



•IDi 



20 



EsO_/ 25 



4 



]#*» 


F(r c / n ) 




















< 



r n 



-27 



29 
EsiO ( 



